saage-it/helloworld

Release historydanger

Only one release exists, published in January 2017, with no releases in the last 12 months. This is strong evidence of an effectively inactive package, despite its stable version.

Repo commit activitydanger

The repository has had no commits or active maintainers in the last three months, and its last push was in March 2020. That long period without activity raises abandonment risk.

Repo toolingcaution

Composer is used for the build, which supports reproducible package structure, but no security scanning tool is configured. For a package with little maintenance activity, that is a meaningful hygiene gap.

Security policycaution

The repository has no security policy, reducing transparency about how vulnerabilities should be reported. This is a secondary concern rather than evidence that the release is unsafe.